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Annotation. 

Generalizing a result of S.V. Konyagin and D.R. Heath-Brown, we prove, in particular, that 
for any multiplicative subgroup R C Z/pZ and any nonzero elements fix, . . . , fi^ the following holds 
\R f](R + iii) P| • • • (~)(R + iJLk)\ <Cfc \R\z +ak , provided by 1 <Ca,. \R\ <.kP 1 ~ ,3k , where a^, (3k are some 
sequences of positive reals and ak,(3k — > 0, k — >■ oo. Besides we show that for an arbitrary subgroup 
R, \R\ ^.p 1 / 2 one have \R±R\^> \R\ 5 / 3 log~ 1/2 \R\ . 

1. Introduction. 

Let p be a prime number, Z* = (Z/pZ) \ {0} be the group of all invertible elements of the 
field Z p , and R C Z* be its multiplicative subgroup. Different properties of such subgroups 
have been studied by several authors, see e.g. [2]-[5], [7]-[14], [16], [18]. For example A. 
Garcia and J.F. Voloch [8], using deep algebraic ideas, proved that for any subgroup R, 
\R\ < (p — l)/((p — 1) 1//4 + 1) and an arbitrary nonzero fx the following holds 

\Rf]{R + fi)\ <A\R\ 2 '\ (1) 

D.R. Heath-Brown and S.V. Konyagin generalized (1) and gave another prove of the result 
in [9] (see also [13]). Their approach uses a well-known method of S.A. Stepanov [15]. In the 
paper we extend the result of Garcia- Voloch and also similar theorems from [9], [13] for the 
case of several additive shifts. Let us formulate one of the main of our results. 

Theorem 1.1 Let R C Z* be a multiplicative subgroup, k > 1 be a positive integer, 
\R\ > k2 2k+4 . Let also fix, . . . , fik be different nonzero residuals, and Q = RQ be a R — 
invariant set, £ Q, \Q\ < ( y ( y \R\/k) 1 / 2k - l) 2k+1 , p > Ak\R\{\Q\w + 1). Then 

j2 i^n^ + a ■ n ■ ■ ■ + a • ^\ ^ + wqi*** + v k+i \R\ ■ (2) 

AeQ 



Theorem 1.1 easily implies a statement on the maximal cardinality of the intersection of 
k additive shifts of a subgroup. 

Corollary 1.2 Let R C Z* be a multiplicative subgroup, k > 1 be a positive integer, and 
fix, . . . be different nonzero elements. Let also 

32fc2 20fclog(fc+l) < |£| ^ p > ^I^KI^I^FT + 1) . 

*The author is supported Pierre Deligne's grant based on his 2004 Balzan prize, President's of Russian Fed- 
eration grant N -1959.2009.1, grant RFFI N 06-01-00383 and grant Leading Scientific Schools No. 8684.2010.1 
^The author is supported by grant Leading Scientific Schools No. 8508.2010.1 
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Then 

\Rf](R + ^) f| . . . (R + » k )\ < A{k + \){\R\^i + . 

Roughly speaking, the corollary above asserts that \Rf](R + fi\) f] ■ ■ ■ f](R + Hk)\ <Cfc 
|i?|2 +afe , provided by 1 <Cfc \R\ <^k p 1 ^^, where otk, (3k are some sequences of positive numbers, 
and ctjfc, j3k — > 0, k — > oo. 

Our approach develops the method from [9], [13]. 

Now consider another additive characteristic of multiplicative subgroups, namely, the car- 
dinality of their sums and differences. Bound (1) implies that (see [8]) 

\R±R\ > |i?| 4/3 

for any subgroup R with \R\ <C p 3//4 . D.R. Heath-Brown and S.V. Konyagin in [9] (see also 
[13]) proved 

\R±R\ > |i?| 3/2 (3) 

for all subgroups R such that \R\ <C p 2 / 3 . Using a combinatorial idea from [20] (see also papers 
[21] — [24], which are develop the approach), we improve inequality (3) (see Theorem 5.5 of 
section 5) in the following way 



R±R\ > 





R\ 5 / 3 


log 1/2 


R\ 



(4) 



for subgroups R with the condition \R\ <C p 1 / 2 . 

Let us say a few words about the structure of the paper. In auxiliary section 2 we give a 
series of required definitions and discuss, in detail, a generalization of ordinary convolutions, 
which is naturally appears in the problems concerning several additive shifts. In the next 
section 3 we obtain preliminary results on linear dependence of some systems of polynomials 
in 7, p [x\. Applying Stepanov's method and using linear independence of such polynomials, 
we get Theorem 1.1 in the next section 4. The last section 5 contains consequences of the 
obtained results, and also their applications to combinatorial number theory. Here we prove, 
in particular, inequality (4). 

We conclude with few comments regarding the notation used in this paper. Let Z p = Z/pZ, 
and Z* = Z p \ {0}. If A is a set then we write A(x) for its characteristic function. Thus 
A(x) — 1 if x e A and A(x) = otherwise. We use the symbol \A\ to denote the cardinality of 
the set A. All logarithms log are base 2. Signs <^ and 3> are the usual Vinogradov's symbols. 
For a positive integer n, we set [n] — {1, . . . , n}. 

The authors are grateful of S.V. Konyagin for a number of helpful advices and remarks. 

2. Katz-Koester method and higher convolutions. 

Recall the required definitions. Let G be a finite Abelian group, = |G|. It is well- 
known [19] that the dual group G is isomorphic to G. Let / be a function from G to C. We 
denote the Fourier transform of / by /, 

/(0 = £ /(x)e(-e • x) , (5) 
xeG 

where e(x) = e 2mx . Define the two convolutions of functions / and g 

(f*9)(x):=^2f(y)g(x-y), and (/ o g)(x) := f(y)g(y + x) . 

2/eG j/GG 
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Write E(A, B) for additive energy of two sets A, B C G (see e.g. [17]), that is 

E(A, B) = \{a 1 + b 1 = a 2 + b 2 : ai, a 2 G A, 61, & 2 G B} \ . 
U A = B we simply write E(A) instead of E(A, A). Clearly, 

E(A, B) = "£(A * B){xf = "£(A o B){xf = "£(A o A)(x)(B o B){x) . (6) 

XXX 

Consider a generalization of the operation o. 

Definition 2.1 Let k > 1 be a positive number, and fi, ■ ■ ■ , fk '■ G — >■ C be functions. 
Denote by C fc (/i, . . . , /fe)(xi, . . . , x fc _i) the function 

Cfc(/i, • • • , fk)(xi, • • • , ar fc _i) = ^2 fi( z )M z + fk(z + x k ) . 

z 

Thus, C 2 (/!, / 2 )(x) = (/! o / 2 )(x). Put d(/) = E, /(*)■ H h = ■ ■ ■ = fk = A, A C G is a 
set then write C fc (A)(xi, . . . , for C fc (/i, . . . , f k )(xi, ■ ■ ■ , a^-i)- 

Definition 2.2 Let A, S C G be arbitrary sets and I > 1 be a positive integer. Then 

A®, 5= |J(A-6)' C G'. (7) 

beB 

In particular A<g)i.B = A<g).B = A-.B. 
Clearly, 

supp C k (B, A,...,A)=\J(A- af- 1 = A B C G*" 1 . 

aS-B 

We have |A| fe_1 < \A <S>k-i B\ < \B\\A\ k ~ l . In particular, the set A <S>k-i B is nonempty. Let 
E k (fi, ■ ■ ■ , fk) = fk)(xi,...,x k -!). 

Then E 2 (A, B) = E(A, B). We write E k (A) for E k (A, . . . , A). There is an obvious connection 
between quantities \A ®k-i A\ and E k (A). 

Lemma 2.3 Let A,B<ZQ be two sets, and k > 2 be a positive integer. Then 

\A\ 2k - 2 \B\ 2 < E k (A, ...,A,B)-\A B\ . 

Proof. We have Y, Xl ,..., Xk _, C k (B, A,..., A)(x u . . . , x k -i) = |^| fe_1 |5|. Using Cauchy- 
Schwarz, we obtain the required estimate. □ 

Let B C A be a set, and (xi, . . . , x k ) := x £ A <S>k-i B be a vector. Put .Bj = 
— Xi) P(A — x 2 )P|---P|(A — x k ). Clearly, B$ is nonempty. Besides \Bg\ = 
C k (B, A,...,A){x\,..., Xk-i). We can easily describe the structure A ®k-i B using the sets 
B$. 

Lemma 2.4 Let B C A C G 6e two sefo, and I >\ be a positive integer. Then 
A® l B = {(x 1 ,...,x l ) : A Xli ..., Xl p|S^0}. 
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Corollary 2.5 Let BC4CG be two sets, and I > 2, to > 1 be positive integers, m < I. 
Then 

A® l B= |J {(x 1 ,...,x rn )}x(A® l _ m B xl _ x J. (8) 

(rri,...,:r m )eA(g> m .B 

In particular, 

A® t A = |J {(xi,...,X!_i)} x (A- A^,...,^) . (9) 

(xi,...,X;_i)6A®;_iA 

We need in upper bounds for the cardinality of A <S>k-i A. For positive integers I and to, 
m < I, arbitrary set E C [I], E — {ji, . . . ,j m }, and any vector x = (x±, . . . , xj) the symbol x E 
denotes the vector (x^, . . . ,Xj m ). The following lemma is a consequence of the definitions. 

Lemma 2.6 Let A C G be a set, and I > 1 be a positive integer. Let also S = A — A. 
Then 

(A®i A)(x 1 , ...,xi) < Yl {A® m A){x E ). (10) 

EC[l],\E\=m 

Besides 

(A ® 2 A)(x, y) < S(x)S(y)S(x - y) , (11) 

and 

k 

(A® l A)(x 1 ,...,xi) < Y[ Sfa-Xj), (12) 

where x denotes 0. 

Clearly, (12) is a consequence of (10) and (11). 

Corollary 2.7 Let A C G be a set, and I > 1 be a positive integer. Let also S = A — A. 
Then 

\a ® z a\ < j2 \ a - < J2^ s ° s y^ i ( x ) ■ ( i3 ) 

Proof. The first inequality in (13) is a consequence of formula (8) of Corollary 2.5, applying 
with m — 1. Lemma 2.6 immediately implies the bound \A®i A\ < J2 xeS (S o S) 1 ^ 1 (x) . Finally, 
the middle inequality is a consequence of Katz-Koester inclusion [20] 

Ag-AfC S a , (14) 

where s — (s±, . . . , s m ), t — (ti, . . . , t n ) are two arbitrary vectors of the lengths m, n, respec- 
tively, s E A cg> m A, t £ A ® n A, and the vector u has the length (n + 1) (m + 1) — 1 and consists 
of all non-zero sums Sj + tj, % — 0, 1, . . . , to, j — 0, 1, . . . , n. □. 
Let us generalize Lemma 3.1 from [14]. 

Lemma 2.8 Let A C G be a set, I > 1, k > 2 be positive integers. Then 

E E CL(A gl ,...,A gk )(z 1 ,...,z k - 1 )= E c|'*" +fc (A)(xi, . . . ,x t -i) , (15) 

Sl,...,Sfc Zl,...,Zk-l x 1 ,...,x l _ 1 

where \\s\\ = Y^!j=i ^ n particular, 

E E C k {A Sl ,...,A Sk ){z u ...,z k . 1 ) = \A\W s \\ +k , (16) 

SI, — ,Sk 2 lr-. 2 fc-l 
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and 



E E C%(A Sl ,...,Ag li )(z u ...,z k - 1 ) = £ £? fc (A ffl ,...,A s . fc )= J E?|| S || +fc (A). (17) 

si,...,Sfc zi,-A-i si, ...,Sfc 

Proof. We have (recall that z = 0) 

E E ^(a, 1 ,...,a,j(, 1 ,...,^ 1 )= E E E nn^.K+vi) (is) 

si,. ..,4 zi,...,z fc _i si,. ..,4 zi,...,z fc _i iui,...,ui| j=l i=l 

i fc 

= E E cf(A)(w 2 -w 1 ,...,w l -w 1 )lll[A(w j + z i - 1 ) = 

Wl,...,W t Zl,...,Zfc_l i = l i=l 

= E f l+ "(^)(«' 2 -«'i ) ... ) «' i -«'iMH...%)= E c'i |s1l+fe (A)(x 1 ,...,^_ 1 ), 

W 1: ...,Wl X 1 ,...,Xl_ 1 

because each component of any vector s* appears at formula (18) exactly I times. This com- 
pletes the proof. □ 

3. On linear independence of a system of polynomials. 

In paper [13] the following lemma was proved. 

Lemma 3.1 Let ol\ e Z* be an arbitrary residual. Let also t, B, D be some positive 
integers, p be a prime number, and 

t > BD , p>tB. (19) 

Then the polynomials of the form 

x a *x tbo '*(x - a 1 ) tbl '' (20) 

where a« < D, 6 ,i, < B are linearly independent over Z p . 

In the section we generalize the lemma above for systems of polynomials with larger number 
of monomials. Our dependence between parameters worse than in Lemma 3.1. 

We use the notion of formal derivative in Z p . The derivative of a polynomial is a formal 
derivative of the sum of its monomials, that is another polynomial 



E^' =E 

j=o / i=l 



We consider the derivatives of polynomials with the degree at most p—1. Leibniz's law holds 
for the formal derivative of such polynomials. Note that the derivation is well-defined for 
formal sums not functions. 

Proposition 3.2 Let n, t, B, D be positive integers, and p be a prime number. Let also 
«i,...,a n eZ* be different nonzero residuals, and 

t>hn-l)B 2n + DB n , p>(2nB + 2)t. (21) 

Then the polynomials of the form 

x *i x tb ,i ( x _ ai yb hi _ _ _ ( x _ an yb n:i ^2) 
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where ai < D, 6 ,i, • • • , b n ,i < B are linearly independent over 7h v . 

Proof. Suppose that there is a nontrivial linear combination of the polynomials from (22), 
which equals zero identically 



CiX ai x th ^ (x - an)* 1 * ...(x-a n ) 



tb„ 



0. 



(23) 



Divide (23) by (x — a n ) ts , where s = minj b n ^. Consider the terms from (23) with minimal 
b ni , i.e. equal s. One can suppose that these are the first l terms. Then the polynomial 



$( x ) =^2C i X ai X tbo ' i {x - tti)* 1 -' . . . (X - ttn-i)* 6 "- 1 ' 



(24) 



i=i 



divided by ( y. Denote the sum of polynomials from (24) with the same multiplier 

x tbo ' l (x - en)* 1 * . . . (x - a n -i) tK -^ as 

$i(x) = H^x^ix - an)* 1 ** ...(x- a n ^) tK -^, i = l,...,l. 

Clearly, deg Hi < D and I < B n . Consider Vronskian 



$i(x) $ 2 (x) 

$i(x) $2 (x) 



(0/ 



$/(a;) 
^ l - 1] (x) 



That is a polynomial of x (let us call it P(x)) having the degree at most 

l n-l 



degP(x) < ^T]T% + ^ " X ) " 9^ - ^ 

i=l j=0 

It is easy to see that P(x) divided by polynomials 
and polynomials 

V k (x) = (ar-a fc )( tE ' =lbfc ' i )~*' ( '~ 1) > A; = 1, . . . , n - 1, 
which are called ty (x),..., ^ n -i(x). Thus divided by 



n— 1 



fc=0 



At the same time 



n-l i 



(25) 



i=i 



fc=i i=i 



It is remain to note that if P(x) divided by (x — a n ) c then P(x)/^(x) divided by the same 
monomial and 

deg(P(x)/*(x)) ^ i(n - 1)1(1 - 1) + l(D - 1) . 

Hence either C ^ ^(n — 1)1(1 — 1) or P(x) = but in the case the polynomials $i(x), . . . , &i(x) 
are linearly dependent (see Lemma 3.4 below) and we reduce the original problem to the 
question with the smaller number of brackets. 

Now return to our suggestion that the sum <&(x) from (24) divided by (x — a n ) 1 . In the 
case Vronskian P(x) = W(&i, . . . , $/) divided by (x — a n )* _ ^ _1 ) because of the polynomials 
$(x), $ (/_1) (a;) are divided by (x - a n ) t_( ' _1) . Thus 

t < (I - 1) + \(n - 1)1(1 - 1) + l(D - 1) < \(n - 1)1(1 - 1) + ID . 

Z Z 

On the other hand the total number / of the polynomials / in (24) is bounded by I < B n . 
Hence 

t < -(n- l)B 2n + DB n 
2 V ; 

with contradiction. This completes the proof. □ 

We give two lemmas on linear independence. Lemma 3.3 is a simple general statement and 
Lemma 3.4 allows us to have better dependence between parameters p, t, n, and B. 

Lemma 3.3 Let Vroskian P(x) = W($i(x), . . . , &i(x)) of degree less than p equals zero in 
7L v \x\. Then there is a nontrivial linear combination of the polynomials 3>i(x), . . . , &i(x) with 
coefficients from Z p such that 

Hi$i(x) + . . . + ni$i(x) = o, n!,...,nie z p . 

□ 

Lemma 3.4 Suppose that the notation of Proposition 3.2 holds. Let Vroskian P(x) = 
W($i(x), . . . , &i(x)) equals zero in Z p [x] 

P(x) = . 

Then there is a nontrivial linear combination of the polynomials . . . , 3>j(x) with coeffi- 

cients jj,i G Z p , i G [I] such that 

Ati$i(x) + . . . + ni$i(x) = 0, 

provided by p > (2nB + 2)t. 

Proof. Since P(x) = it follows that there is a nontrivial zero combination of its rows, i.e. 

X^ k (x) + \ 2 & k (x) + ... + X&t^W = 0> k — 1, ... ,1 , (26) 

where the coefficients Aj = Xi(x) depend on x, in general, and does not equal zero simultane- 
ously. We prove that the coefficients A« can be chosen do not depend of x and does not equal 
zero simultaneously. Linear combination (26) can be considered as a formal linear differential 
equation of the order at most I — 1: 

X lU (x) + X 2 u'(x) + ... + Xw^-V (x) = 0. (27) 
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Polynomials u(x), satisfying the last equation form a linear space. It is easy to see that 
any solution of (27) having / — 1 derivatives at some point xq equal zero is equal to zero 
identically. Indeed, putting, say, x = in (27), we get a linear relation between u( i-1 )(0) 
and ■u (7_1 - ) (0), . . . , u(0). Taking the formal derivation of (27), we obtain similar relations for 
w^(0) and so on. Thus all derivations of u are zero because they can be expressed as linear 
combinations of u( J-1 )(0), . . . , u(0). We will prove below that the degrees of the functions Xi(x) 
as well as linear combination (27) is less than p. Thus we can take the formal derivations of 
all these functions and apply the previous arguments. 

Now consider a linear combination of columns of the Vronskian at the point x — 0. By 
assumption we have for some /ii, . . . , /ii that 

LH®?\0) + ^i k) (0) + ■■■ + /i^ (fc) (0) =0, k = 0, 1, . . . , I - 1. 
Consider the solution 



U(x) = Ati$i(x) + V2$2(x) + ...+ fJll$l(x) 

of equation (27). Then -u(O), . . . , u^~^(0) equal zero. By the previous arguments u(x) = 
0. Thus we have found a zero linear combination of the polynomials <J>i(x), • • • , <&i(x) with 
coefficients /xi, . . . , Hi G 7L V and we are done. 

It is remain to show that the left hand side of equation (27) is a polynomial of degree less 
than p. 

Lemma 3.5 The degree of the polynomial 

Xiu(x) + \ 2 u'(x) + ... + \iu {l ~ l \x) 

less than (2nB + 2)t. 

Proof. The coefficients Ai, . . . , A; are solutions of homogeneous system of linear equations 
(26). Clearly, system (26) has a nonzero solution for all x. We will use Cramer's rule. Suppose 
that there are l\ linear independent equations among / equations of the system. Without loss 
of generality one can suppose that these are the first l\ equations. Further there exist l\ 
columns of the matrix of system (26) such that the matrix formed by the elements of the first 
li rows and these l\ columns is non-degenerate for some x. By ii, . . . , %i x denote the indexes of 
the columns and let j±, . . . jji-^ be the indexes of another columns. Let us solve system (26). 
We have 



A il $? 1 " 1) (x) + 



+ A* 



<5> k (x) 



i-h 



s=l 



where 



i-h 



$ fc (a;) = -^A Js ^- 1) (x), k = l,...,h. 



s=l 



The solutions of the system form a linear space of the dimension l — l\. Put A^, . . 
equal 



A 



Ol-U 



A, 



x D ^u]=A x -^y 

if(x) 



^- 1] (x) 



(n-i), 



x) 

» 



,l-h 
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where 



n— 1 



3=1 



where c q = degH q < D. Then by Cramer's rule for % — 1, . . . , I — 1, we obtain 



A, 



x D+tB Y[ n .Zl(x - aj ) tB 



$S <1_1) (x) . 


■■ *ir 


'\x) 


$? s - 1_1) (:r) . 




\ 




■ ■ K 


(x) 


^ s+1 - l \x) . 








h 


■%) 



s = l, 



where 



i-h 



s=l 

It is easy to see that all Ai, . . . , A/ are polynomials. Let us find an upper bound for the degrees 
of such polynomials 

deg\i(x) ^ h(l-l)(n-l) + (l + l)D + nBt< (nB + l)t, i = l,...,Z; 
2 

The degree of each does not exceed 

deg$ fc (x) < nBt + D , 

hence 

deg(Ai$ fc (ar) + \ 2 & k (x) + ... + A,^ ,_1) (a;)) < 2ntfi + i + D - 1< (2nB + 2)t , 
as required. □ 

Note 3.6 Proposition 3.2 can be proven using Fuchs equation for Levelt's basis (see the 
formulation in [1]). Nevertheless, we prefer to use a more simple approach calculating the 
degree of Vronskian of the system of the polynomials from (22). 

Similarly, we obtain the following proposition. 

Proposition 3.7 Let n, t, B , D , D < t be positive integers, and p be a prime number. 
Let also T be a set, T C Z*, T > n — 1. Finally, suppose that 



— D 2 B 2n 

t > DB n + -2 , p > mm{tnDB n+l , B 2 t 2 n 2 } . 

\T\ — n + 1 

Then there is a tuple a±, . . . ,a n e T such that the polynomials of the form 

X a >X tb( ^(x - ai ) tb ^ ...(X- O,,)*"'' 



(28) 



(29) 



where < D, &o,«, • • • , b n ,i < B are linearly independent over Zp. 

Proof. One can suppose that for some cei, . . . , a ra _i G T the correspondent polynomials from 
(29) are linearly independent over Z p , otherwise we have a problem with smaller number of 
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brackets. Thus, fix a±, . . . , a n -i £ T and let a n belongs to the nonempty set T\{a±, . . . , a n _i}. 
After that apply the arguments as in Proposition 3.2. Suppose that there is a nontrivial linear 
combination of the polynomials from (29) which equals zero identically 



c ^ 



x tb °Hx - a 1 ) tbl '' ...(x- a n ) th ^ = 0. 



(30) 



i=i 



Divide (30) by (x — a n ) ts , where s = minj b n ^. Consider the terms from (30) with minimal 
b n j, i.e. equal s. One can suppose that these are the first / terms. Then the polynomial 



$(x) = ^C, 



x ai x tbo >Hx - ai 



[x - a n -i 



i=l 



divided by (x — a n )'. Denote the sum of polynomials from (31) by 

$;(x) =x ai a: tto ' i (a;-ai) ttl ' i ...(a;-a n _i) tt "- 1 ' i , i = l,...,Z. 
Consider Vronskian 



(31) 



$i(x) $ 2 (x) ... $,(x) 
$i(x) $' 2 (x) ... $|(x) 



$? _1) (x) $ 2 °(x) ... $f _1) (x) 
That is a polynomial of x (let us call it P(x)) having the degree at most 

l / n-l 



deg P(x) < ^2 \ ai + t S 

j=0 



-Z(Z-l). 



i=l 



It is easy to see that P(x) divided by polynomials 

= a .Ei=i(ai+«o,i)-3i('-l) 

and polynomials 

tt fc (ar) = (x-a^O^^O-s'C" 1 ), A; = l,...,n- 1, 
which are called ^ (x) : . . . , \l/ n _i(x). Thus P(x) divided by 



n-l 



fc=0 



At the same time 



n-l J 



(32) 



deg *(x) = ^(a, + 460,0 + * S S 6fc >* ~ " ^ = deg P ^ ~ o ^ n ~ ~ 1 ^ 



i=i 



k=l i=l 
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It is remain to note that if P(x) divided by (x — a n ) c then P(x)/^>(x) divided by the same 
monomial and 

deg(P(s)/¥(s))^(n-l)Z(Z-l). 

Hence C ^ \(n — 1)1(1 — 1). Note that the polynomial P(x) does not equal zero identically 
because in the case the polynomials $i(x), . . . , $i(x) are linearly dependent and we obtain a 
contradiction (see Lemma 3.3 or Lemma 3.4). 

Now return to our suggestion that the sum from (31) divided by (x — a n )*. In 

the case Vronskian P(x) = W($i, . . . , $/) divided by (x — a n ) t- ( i-1 ) because of the polyno- 
mials $(x), . . . , ^'^(x) divided by (x — a n )* - ^ -1 ). Thus for every a n Vronskian P(x) = 
W($i, . . . , $/) divided by (x - a n ) t ~ ( - l ~ 1 ' ) . Whence 

(|T| - n + l)(t - (I - 1)) ^ (I - 1) + \{n - 1)1(1 - 1) + l(D - 1) < Un - 1)1(1 - 1) + ID . 

Z z 

On the other hand the total number of polynomials I in (31) equals DB n . Hence 

%D 2 B 2n 
t < DB n + -2- 



n + l 

with contradiction. 
Note also 

degP(x) < mm{tnDB n+1 ,B 2 t 2 n 2 } <p. 

This completes the proof. □ 

4. The proof of the main result. 

Let R C Z* be a multiplicative subgroup, and t — \R\. Let k > 1 be a positive integer, 
and fii, . . . , fik be fixed different nonzero elements. Let also £o> £i> • • • > £fc be some nonzero 
residuals, and ^4|* A , £ = (£o,£i, • • • ,£,k), A G Z* be arbitrary subsets of the set C, Rf](^iR + 
A ' f^i) D ' ' ' fKCfe-^ + A • /ifc). Finally, suppose that we have a family of sets Al , • • • , -A^ Xs , 
where the sets A? „ can have the same A/. 

Applying Stepanov's method, we prove one of the main lemmas of the section. We use 
arguments from [13] (see also [9]). 

Lemma 4.1 Let R C Z* be a multiplicative subgroup, and t = \R\. Let k > 2, s, B be 
arbitrary positive integers such that 

kB 2k <t, ts< B 2k+1 , (33) 

and 

p>(2kB + 2)t. (34) 
Let also A^ Al , • • • , A^ As be some sets of the family above. Then 

i 6.V - [t/2B k ] 



i=i 

?2fc 



Proof. Let D = [t/(2B k )}. Since 2B k < kB 2k < t it follows that D > 1. Let also £ be the 
union of all sets A^ x . One can assume that the sets A^ A; are disjoint, and A = 1. We need to 
estimate the size of the set £. Let $(X, Y, Zy, . . . , Z k ) G Z P [X, Y, Z-y, . . . , Z k ] be an arbitrary 
polynomial such that 

deg x $ < D , deg y $ < 5 , deg z . $ < 5 , jG[fc], 
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We have 

$(X, Y,Z u ...,Z k ) = J2 K, b , S X a Y b Z\ 

a,b,c 

where c = (ci, . . . , c fc ) e Zj and Z ? = . . . Z c k k . Besides 

*(X) = $(X, X\ (X - u^, . . . , (X - fx k Y) 



(36) 



(37) 



Clearly 



deg < L> - 1 + (fc + l)t(5 - 1) . 



If we will find the coefficients X a ,b,c such that, firstly, the polynomial \1/ is nonzero, and, 
secondly, \& has the root of order at least D at any point of the set £ then 



\£\ < (D - 1 + (Jfe + l)t(B - l))/D < 

and lemma will be proved. Thus, we should check that 

d 



(k + l)tB 
[t/2B k ] 



dX 



*(X) 



X=x 



, Vn < D , Vr G £ 



For any x G £, we have i ^ and x ^ fXj, j E [k]. Hence the last condition is equivalent 



[x(x-vi 1 )...(x-n k )Y 



d 

dX 



*(X) 



, Vn < D , ViG<? 



(38) 



It is easy to see that for all m,q, q > m, and any \i the following holds 

q\ 



If m > g then the left hand side equals zero. So, there are well-defined polynomials P n , a ,b,c{X) 
such that 

[x(x -k)...(x- ii k )] n (J£) x a x tb (x - ni) tn ... (x - n)** = 



P n ^(X)X tb (X - . . . (X - u fc 



Here a,b,c±, . . . ,c k are nonnegative integers. For some a, b, c polynomial P n ,a,b,s can be iden- 
tically zero. Clearly, degP n)a ,&,c < a + n. By the definition of the sets £ and - ( , we have 



[X(X - u x ) ... (X - a,)]" (^)" X«X' 6 (X - uO^ . . . (X - u fe ) 



fcfc 



= y b {l)y?{l) . ..y^{l)P n , a , b ^X) , x G , 

where residuals y^l) , y^ 1 (I) , . . . , ^(Z) does not depend on the choice of the element x G A^ - . 
By (36), (37) 

[X(X - u x ) ... (X - /i fc )f / 



dX 



*(X) 
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Coefficients of the polynomials P n j(X) are linear forms of \ a ,b,s- Choose \ a ,b,s such that 
polynomials P n i(X) are identically zero for an arbitrary n < D and any I G [s]. Then 
equality (38) holds for all x G £. We have (33). Since degP„^ < 2D it follows that 

2sD 2 < 2sDt/2B k < DB k+1 , (39) 

and (39) guarantee that there is a nonzero tuple of coefficients \ a ,b,s such that P n j(X) = 0, 
n < D, I G Is]. 

We must check that the obtained polynomial ^(X) is nonzero. We have D = \t/(2B k )], 
and kB 2k < t. Hence t > \{k — l)B 2k + DB k . Besides inequality (34) holds. Using Proposition 
3.2 with n = k, we obtain that the polynomial ^(X) is nonzero identically. This concludes 
the proof of the lemma. □ 

Proof of Theorem 1.1. Let \R\ = t, s = \Q\/t. Let B be the least integer such that 
B 2k+1 > ts. Then B < {ts) l ^ 2k+ ^ + 1. Using bound 

\Q\ < {{t/kf' 2k - l) 2k+1 , 

we get 

kB 2k < k((ts)^ 2k+ ^ + l) 2k < t 
and condition (33) of Lemma 4.1 is satisfied. Since t > k2 2k+i and 

\Q\ < {(t/k) l ' 2k - l) 2k+l < (t/kf k ^' 2k , 

it follows that t/2B k > 2. Finally, inequality (34) of the same Lemma is a consequence of 
p > 4th(\Q\™+i + 1). Applying the lemma and using the bounds t/2B k >2,B< \Q\^+^ + 1, 
we obtain 



Y \Rf](R+^i) n • • ■ n^+^i < t { \^2&] - A ( k+i ) Bk+H ^ i(k+i)(\Q\^ + i) k +H . 



This completes the proof. □ 

Proof of Corollary 1.2. It is sufficiently to check that for all \R\ > S2k2 20klos(k+1 ^ > 
k2 2k+A the following holds 

\R\ < ((\R\/k) 1/2k -l) 2k+1 . 

It is easy to see that the assumed bounds for the cardinality of R imply the last inequality. □ 
Using Proposition 3.7 instead of Proposition 3.2, we obtain the following statement. 
Statement 4.2 Let k > 2 be a positive integer, and R C Z* be a multiplicative subgroup. 

Let also T C Z* be any set, 2k < \T\ < \R\k/2, and let s, B be arbitrary natural numbers such 

that 



R\\T\ 



1/2 



2kB 2k < \R\\T\, 2s y-^j^J <B 2k+1 , (40) 
and 

p>(2kB + 2)t. (41) 
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Then there are different elements /ij G T, j G [k] such that for all sets Al , • • • , A^ x ^ the 
following holds 

VL4- |< (k + l)\R\B 



1=1 



Proof. Let t = \R\, and D = \(t\T\/ (2kB 2k )) 1 ' 2 }. Since 2kB 2k < t\T\ it follows that D > 1. 
Besides D < t because of |T| < t/c/2. Let also £ be the union of all sets Ag A . Using the 
arguments as in Lemma 4.1, we construct a polynomial ^, having a root of order at least D 
at any point of the set S. If the polynomial \I/ is nonzero then we have the following bound 
for the cardinality of the set S 

\S\ < (D - 1 + (k + l)t(B - I)) /D < {k + l)tB 



\T\/(2kB 2k )y/z} • 

Besides an analog of inequality (39) is 

2sD 2 < 2sD{t\T\/(2kB 2k ))^ 2 < DB k+1 , (43) 
where the second inequality from (40) was used. By (40) and \T\ < tk/2, we find that 

k -D 2 B 2k 



t > DB + 



k i 2 



|T| - k + 1 



Using condition (41) and applying Proposition 3.7 with n = k, we obtain that for some 
different fj,j G T, j G [k], the polynomial ^(X) is nonzero identically. That concludes the 
proof. □ 

Note 4-3 Though sum (42) in Statement 4.2 considered for specific tuple of elements fij 
the dependence between parameters B,t and T (see the first inequality from (40)) not so 
onerousness as bound (33) of Lemma 4.1. 

Corollary 4.4 Let R C Z* be a multiplicative subgroup, k > 1 a positive integer. Let also 
T C Z* be any set, 2k < \T\ < \R\k/2, Q = RQ be a R — invariant set, ^ Q, 

and 



2\T\ \\ 8k 



P 



> 



k\R\ 3 \T\ 



2 // /2|T , X l/2\V(2fc+l) 



V 



min C k+ i(Q,R, . . . ,R)(fii, ■ ■ ■ ,Hk) < 
m,...,ij, k eT, m^nj 



< (32/fc 3 ) 1 / 2 



j^i \ 1/2 / / /2|X , ' Nv ^^ 




l/(2fc+l) 




Proof. Let t = s = Let B be the least integer such such that B 2k+1 > 2s (tjpfj . 

(l/2\ 1/(2^+1) -yjl f l/2k \ ^&H~"1 

2s (S) ) + L Since \Q\ < (#[) ((™) - 1 ) it follows 
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that 

If ft\T\\ l ' 2 \ ll{2k+1) V 
2kB 2k < 8kB 2k < 8k 2s I -LI j +1 <t\T\. (46) 

Thus all conditions (40) of Statement 4.2 are satisfied. Inequality (41) of the lemma is a 
consequence of bound (45). Using Statement 4.2 and (46), we obtain 



^ <*«(«.*....,*)<« < |(i|r j^ )1/2| < m" 2 (k + 1) (^)'V 1 



/t\ 1/2 [{ /2in\ 1/2 V /(2 * +11 ' ' 

<( 32 ^(^) ) +1 

This completes the proof. □ 

Note 4-5 One can generalize Corollary 4.4 consider the sum 
^AeQi Ck+i(Q, R, ■ ■ ■ , R)(^i, ■ ■ ■ , A*fc), <5i = -RQi as in Theorem 1.1. We do not need 
in the generalization. 

5. On subgroups sumsets. 

First of all we write simple consequences of Lemma 4.1 and Theorem 1.1. 
Corollary 5.1 Let R C Z* be a multiplicative subgroup, and Q,Qi,Q2 Q %>* p be arbitrary 
R-invariant sets. Then 

1) If\Q\ < \R\ 3 , \Q\\R\ 3 <p 3 tfien 

]>>oi?)(*)<<|i?||g| 2 / 3 . (47) 

2) // IQHQil < \R\ 4 , \Q\\Qi\\R\ 2 < P 3 ^en 

^(Q 1 o J R)(a ; )«| J R| 1 /3(|g||g 1 |)2/3. (48) 

3) //|Q||Qi||Q 2 | < l^l 5 , \Q\\Qi\\Q2\\R\ <P 3 ^en 

« | J R|- 1/3 (|g||giiig 2 |) 2/3 . (49) 



Note 5.2 Clearly inequality (49) can be improved provided that some information of the 
set UgeQl? -1 ^! x ( 1 1 Q2) (which is a multiplicative analog of the set from (7)) is known. 

Corollary 5.1 implies a statement about additive energy of any R — invariant set. The 
statement is a tiny generalization of a result from [13]. Applying Statement 5.3 below it is 
easy to obtain (using Lemma 2.3, for example) that any i?-invariant set Q C Z*, such that 
\Q\ < |-R| 3/2 , \Q\\R\ 1/2 <p has the extension property, namely, \Q±Q\ > |g||-R| 1/2 . 

Statement 5.3 Let R C Z* be a multiplicative subgroup, and Q C Z* be an arbitrary 
R-invariant set . Let also \Q\ < |-R| 3/2 , and \Q\\R\ 1/2 < p. TTien 

S(Q)<£ ond maxig^l^igr/^r^V 78 . (50) 
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Proof. Let a be a parameter. We have 

E(Q)<a\Q\ 2 + J2 (Q°Q) 2 ( X )- 

x : (QoQ)(x)>a 

Let us arrange values (Q o Q)(x), x e 7i p /R in decreasing order and denote its values as 
Ni > N 2 > . . . . Using formula (49) of Corollary 5.1, we get Nj < \Q\^\R\~ 2 / 3 j- 1 / 3 . Hence 

E(Q) « a\Qf + \R\ £ r 2/3 ■ « a|Q| 2 + ]|£ . 

Putting a = |<5|/|-R| 1//2 , we obtain the required result. The second inequality in (50) is a 
consequence of the first one, see e.g. the proof of Corollary 2.5 from [14]. □ 
We need in a lemma from [14]. 

Lemma 5.4 Let R C Z* be a multiplicative subgroup, \R\ <C p 2 ! 3 . Then 

E 3 (R) < |i?| 3 log|i?|. 



Let us obtain a new result on doubling constant of multiplicative subgroups. 
Theorem 5.5 Let R C Zl be a multiplicative subgroup. If \R\ <C p 1 ^ 2 then 



\Rf/ 3 
log 1/2 \R\ 



\R±R\ > n 1 1/ J 2 , . (51) 



Proof. Let S = (R — R)\ {0} (for R + Rwe use similar arguments). Using Lemma 2.3 and 
Corollary 2.7, we get 

\R\ 6 < E 3 (R)-J2( SoS )( x )- 

xes 

If IS'I |i?| 5 / 3 then it is nothing to prove. In the opposite case, we have IS 1 ! 3 !/?! <C p 3 , because 
of the assumption \R\ <C p 1 ^ 2 . Using bound (49) of Corollary 5.1 with Q = Q x = Q 2 = S, and 
Lemma 5.4, we get 

|i?| 6 < |i2| 3 log|i2| • \S\ 2 \R\- l/3 . 

Hence IS'I ^> \R\ 5 ^ 3 log -1 / 2 \R\. Theorem is proved. □ 

Inequality (51) answered on a question of article [7]. A weaker bound for subgroups such 
that \R\ <C y/p, better than (3) was obtained by T. Schoen and the second author in [14]. The 
strongest result on the cardinality of R±R, where y/p <C \R\ <C p 2 ^ 3 , is contained in [14]. Let 
us note a consequence of the theorem above. 

Corollary 5.6 Let R C Z* be a multiplicative subgroup, and k > p be a real number. 
Suppose that \R\ > p K . Then for all sufficiently large p the following holds Z* C QR. 

Corollary 5.6 is a consequence of Theorem 5.5 and can be proved exactly as Theorem 4.1 
from [14], where the inclusion Z* C 6R was obtained under the assumption k > g|. Note that 
a result of A. A. Glibichuk [12] (see also [25]) implies that |4i?| > p/2 (and hence 8R = Z p ), 
provided by \R\ > y/p. 
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